At the beginning of May, Google released eight new top-level domains (TLDs)—the suffixes at the end of URLs, like “.com” or “.uk.” These little addendums were developed decades ago to expand and organize URLs, and over the years, the nonprofit Internet Corporation for Assigned Names and Numbers (ICANN) has loosened restrictions on TLDs so organizations like Google can bid to sell access to more of them. But while Google's announcement included light-hearted offerings like “.dad” and “.nexus,” it also debuted a pair of TLDs that are uniquely poised to invite phishing and other types of online scamming: “.zip” and “.mov”.
The Real Risks in Google’s New .Zip and .Mov Domains
While the company’s new top-level domains could be used in phishing attacks, security researchers are divided on how big of a problem they really pose.
Photograph: Nerthuz/Getty Images
You’ve read your last free article.
The intersection of technology, power, and culture. Start your free trial and get access to 5 all-new premium newsletters—cancel anytime.
Already a subscriber? Sign In
The intersection of technology, power, and culture. Start your free trial and get access to 5 all-new premium newsletters START FREE TRIAL

